Approved changes feed: RSS · Atom

cpe:2.3:a:weintek:cmt-svr-1xx/2xx:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorWeintek (b4691633-4eb4-52d5-bc64-ee82eca3c353)
ProductCmt Svr 1Xx/2Xx (9eb47d51-066a-5401-837b-969859881729)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-27446 vulnerable 2026-06-03 14:44:15.954321 Weintek EasyWeb cMT Code Injection
CRITICAL (10)
The Weintek cMT product line is vulnerable to code injection, which may allow an unauthenticated remote attacker to execute commands with root privileges on the operation system.
Published: 2022-05-16T17:15:44.847Z
Updated: 2025-04-16T16:21:16.549Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-27444 vulnerable 2026-06-03 14:44:15.944874 Weintek EasyWeb cMT Improper Access Control
CRITICAL (9.8)
The Weintek cMT product line is vulnerable to various improper access controls, which may allow an unauthenticated attacker to remotely access and download sensitive information and perform administrative actions on behalf of a legitimate administrator.
Published: 2022-05-16T17:15:15.597Z
Updated: 2025-04-16T16:21:25.289Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-27442 vulnerable 2026-06-03 14:44:15.908361 Weintek EasyWeb cMT Cross-site Scripting
CRITICAL (9.4)
The Weintek cMT product line is vulnerable to a cross-site scripting vulnerability, which could allow an unauthenticated remote attacker to inject malicious JavaScript code.
Published: 2022-05-16T17:13:17.743Z
Updated: 2025-04-16T16:21:32.645Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.